$ rpki-client -vvf repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft File: 30C896473FC5DE403F4651059F6BE1586BFAC473.mft (raw, json) Hash identifier: GCcMHRYVHRk4cnANo+41sOXu47vc5MaZJTqFABzL4Xs= Subject key identifier: 19:04:75:63:49:B7:2C:97:7A:47:12:2D:02:FC:09:3B:EC:E6:09:DD Authority key identifier: 30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 Certificate issuer: /CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Certificate serial: 7A940D40579E31A95E3D4D28897B928E492C342B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft Manifest number: C4 Signing time: Wed 05 Nov 2025 19:51:43 +0000 Manifest this update: Wed 05 Nov 2025 19:46:43 +0000 Manifest next update: Sun 09 Nov 2025 00:50:43 +0000 Files and hashes: 1: 3135372e36362e36362e302f32342d3234203d3e20313532373831.roa (hash: x/vtNdgftiP2gNHQRXmqF+bNIt+0K74KbEvvSueFvXY=) 2: 3135372e36362e36372e302f32342d3234203d3e20313532373831.roa (hash: jM3o+qLgLitpWG9aIDTu7g7FqrNoiH7dHWh51KuZSvY=) 3: 30C896473FC5DE403F4651059F6BE1586BFAC473.crl (hash: ccPshLa6wAILZeV3WCyD54hePiPLsIVX2AqlbVaNb/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 22:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:94:0d:40:57:9e:31:a9:5e:3d:4d:28:89:7b:92:8e:49:2c:34:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Validity Not Before: Nov 5 19:46:43 2025 GMT Not After : Nov 9 00:50:43 2025 GMT Subject: CN=1904756349B72C977A47122D02FC093BECE609DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ef:73:53:bf:8b:ee:fa:7c:b0:f7:93:da:78: e8:dc:51:df:79:43:43:22:dc:4b:34:59:d5:ed:44: 36:7a:fc:1a:ac:e3:f2:68:87:0a:47:25:55:27:0a: 23:ed:28:13:49:fc:98:e7:7f:32:f1:6e:e5:10:8e: 25:c5:2c:ec:ec:11:f9:ce:2b:f5:ca:72:c3:28:01: 8c:86:c4:64:28:ef:f4:cb:31:92:77:8e:72:7a:06: e8:9f:a8:6b:ce:36:2d:94:fb:a1:71:b3:d8:9d:67: 7f:aa:a2:d0:73:42:8b:27:a5:70:da:e6:01:d9:eb: 96:1a:50:e2:75:16:83:c2:c5:15:45:bb:61:59:5c: 72:8b:d5:2c:75:c9:1c:42:69:38:0f:86:ff:82:c5: 78:09:69:b8:2e:21:73:1c:9c:aa:50:0b:aa:63:01: 01:31:4d:fd:b4:1c:92:fc:75:3f:83:f7:72:13:e1: 66:f1:d1:01:cf:e7:c5:ec:94:a9:96:a8:0d:82:66: 43:71:fd:ab:13:69:57:fd:89:a0:6d:80:77:8b:95: 81:43:f3:4b:ca:96:2c:83:1f:c6:94:ca:2a:45:d8: 67:09:a9:d2:af:0d:6e:12:e7:a2:73:3b:4a:f4:63: 99:a7:10:2f:f8:02:d0:39:04:52:a3:36:60:95:a8: 58:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:04:75:63:49:B7:2C:97:7A:47:12:2D:02:FC:09:3B:EC:E6:09:DD X509v3 Authority Key Identifier: keyid:30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:bc:a8:f6:fc:38:6b:32:fe:17:fe:3d:37:43:d7:54:10:84: 94:9e:b6:8b:c0:50:31:42:59:1f:b0:b2:1a:bd:98:32:65:81: 0f:5c:be:3f:18:10:5b:28:a7:f6:0d:22:1f:a8:04:38:cf:c0: 7a:c3:40:a8:3c:59:f6:39:62:dd:89:cd:57:b5:62:3a:86:b2: 8b:54:b5:b3:1d:70:2a:5e:36:16:d2:c1:10:07:ac:24:fe:ec: 52:bd:cf:d9:4b:7b:d2:36:76:9b:27:07:8f:68:12:94:8f:17: c4:d7:e9:1f:96:9a:d2:2d:9e:9c:a8:e0:ea:c0:01:62:09:a1: e7:39:8c:31:e6:55:5f:ca:73:f6:75:39:05:07:43:56:77:04: 6e:d8:5c:4b:3e:25:d3:55:6e:e6:b0:51:1c:c8:f9:52:54:15: d5:82:09:9d:fa:d6:18:9c:3b:7a:6a:9a:c9:50:94:af:53:e0: 16:3a:2c:db:3b:a6:fb:57:92:c0:d9:8c:66:33:81:cc:a2:30: f9:a7:87:a3:a9:48:78:29:fa:5c:d5:78:ce:60:98:11:3d:fe: 58:07:95:c3:a3:ce:e6:5a:bb:a6:e9:8f:63:e7:0a:67:66:ef: a9:56:bd:c8:8e:0b:f7:a0:ba:27:20:28:56:d0:31:32:82:01: 6c:25:18:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUepQNQFeeMalePU0oiXuSjkksNCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUxNTg2 QkZBQzQ3MzAeFw0yNTExMDUxOTQ2NDNaFw0yNTExMDkwMDUwNDNaMDMxMTAvBgNV BAMTKDE5MDQ3NTYzNDlCNzJDOTc3QTQ3MTIyRDAyRkMwOTNCRUNFNjA5REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB73NTv4vu+nyw95PaeOjcUd95 Q0Mi3Es0WdXtRDZ6/Bqs4/JohwpHJVUnCiPtKBNJ/JjnfzLxbuUQjiXFLOzsEfnO K/XKcsMoAYyGxGQo7/TLMZJ3jnJ6BuifqGvONi2U+6Fxs9idZ3+qotBzQosnpXDa 5gHZ65YaUOJ1FoPCxRVFu2FZXHKL1Sx1yRxCaTgPhv+CxXgJabguIXMcnKpQC6pj AQExTf20HJL8dT+D93IT4Wbx0QHP58XslKmWqA2CZkNx/asTaVf9iaBtgHeLlYFD 80vKliyDH8aUyipF2GcJqdKvDW4S56JzO0r0Y5mnEC/4AtA5BFKjNmCVqFg3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGQR1Y0m3LJd6RxItAvwJO+zmCd0wHwYDVR0j BBgwFoAUMMiWRz/F3kA/RlEFn2vhWGv6xHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjcwYWU3Ni05NTk0LTQ5ODAtYjQxMC00OTFhNjMxOWZmM2EvMC8zMEM4OTY0NzNG QzVERTQwM0Y0NjUxMDU5RjZCRTE1ODZCRkFDNDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUxNTg2QkZB QzQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY3MGFlNzYtOTU5NC00OTgwLWI0 MTAtNDkxYTYzMTlmZjNhLzAvMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUx NTg2QkZBQzQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAO8qPb8OGsy/hf+PTdD11QQhJSetovAUDFC WR+wshq9mDJlgQ9cvj8YEFsop/YNIh+oBDjPwHrDQKg8WfY5Yt2JzVe1YjqGsotU tbMdcCpeNhbSwRAHrCT+7FK9z9lLe9I2dpsnB49oEpSPF8TX6R+WmtItnpyo4OrA AWIJoec5jDHmVV/Kc/Z1OQUHQ1Z3BG7YXEs+JdNVbuawURzI+VJUFdWCCZ361hic O3pqmslQlK9T4BY6LNs7pvtXksDZjGYzgcyiMPmnh6OpSHgp+lzVeM5gmBE9/lgH lcOjzuZau6bpj2PnCmdm76lWvciOC/eguicgKFbQMTKCAWwlGPU= -----END CERTIFICATE-----Generated at Thu Nov 6 02:55:52 2025 by rpki-client